$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: jvJJZ6H/BNMpWHCu83wUqMNJ36prHWKZ8gN/z55NWbY= Subject key identifier: 78:4B:FD:F5:E4:11:A9:42:00:F7:DA:E3:18:20:E1:F0:72:52:C7:E8 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 34EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 34DF Signing time: Tue 04 Nov 2025 14:38:11 +0000 Manifest this update: Tue 04 Nov 2025 14:38:10 +0000 Manifest next update: Tue 11 Nov 2025 14:38:10 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: w21EEIxzoOlSgMlVBKqkUvUeabtQqR17PrkFk4PrEac=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: RA6RFmE6k5HO1bBqRafgilu2yoyhiNE9rjZysYl9t3k=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: APLkO/9VQDMo8Mg1BILGpzlcs8IiIyqCJfnR8QGrWEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13546 (0x34ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Nov 4 14:38:10 2025 GMT Not After : Nov 11 14:38:10 2025 GMT Subject: CN=690a0fd2-764e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:c5:81:6a:2c:1b:6f:5a:d1:43:9c:69:cd: 8f:51:08:de:9c:fe:8f:36:52:95:77:b7:dc:18:48: e9:7d:26:79:8d:48:0e:91:88:0e:02:b0:00:00:06: 2b:6d:94:ff:13:4d:1d:d0:f0:a8:ee:cc:5f:59:75: 71:b7:aa:42:98:17:95:71:6b:72:ad:7f:8e:d4:72: 81:09:65:b1:3a:02:53:89:76:84:5b:54:3e:ba:44: c5:70:c7:ae:37:84:a3:e5:66:f0:30:4e:db:25:c9: b1:3e:79:c3:81:d8:85:35:ab:d1:a3:41:29:89:bb: b9:3f:df:34:83:58:01:a8:47:3e:8b:3f:c1:5e:43: db:6b:68:3e:2c:9e:ed:cb:c3:54:09:9f:ed:c5:9e: 28:cb:c2:e6:a5:35:d8:f5:36:dc:57:e3:c0:88:7e: 7f:93:0e:bc:a0:b7:15:e9:52:11:db:a8:42:58:4d: bd:8c:bf:cc:b6:f6:80:28:5f:8b:f5:fa:f4:49:e8: 65:5a:35:75:a6:65:7c:c5:f4:58:c7:93:5e:99:c4: 25:f2:16:eb:8f:1f:ac:be:a1:09:df:4d:1b:47:ea: 76:e2:da:27:8b:5a:6b:50:48:a8:5d:05:6e:bf:5f: 4d:e8:f2:a7:b8:5c:3f:52:8b:27:41:61:a6:99:90: 31:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4B:FD:F5:E4:11:A9:42:00:F7:DA:E3:18:20:E1:F0:72:52:C7:E8 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:e6:c0:68:5f:f6:46:a8:a0:ef:8f:af:a4:cb:58:04:da:22: 63:9a:ef:0c:e3:74:9b:08:17:be:ac:c1:33:ff:62:bd:5d:34: 1a:84:c5:80:ad:d1:e0:c4:dd:07:70:ce:8f:e7:4f:fe:87:cb: 58:c9:94:6b:92:3d:86:33:9d:38:1e:d1:b4:52:8c:17:92:7f: 30:75:c6:7e:7b:00:4a:16:3a:27:b8:09:6a:b7:5b:d6:6b:d7: 47:38:19:44:2c:41:1f:10:c4:37:cd:31:d6:b3:ad:5c:8d:68: 3d:31:23:04:fb:38:c5:44:c9:cf:ea:62:cf:73:ba:00:9d:1d: cd:9d:d2:d0:e0:99:a9:06:95:d1:1c:0d:59:20:26:38:5b:c9: 8b:30:47:f6:7e:c3:1d:69:e3:a7:d3:ec:17:37:fc:38:ef:75: e6:6a:de:ba:df:0c:07:61:77:05:48:be:80:45:ca:e3:ce:db: 78:e3:3a:1e:9e:ee:e6:bd:f0:ce:04:ee:d5:06:a0:53:96:2f: 97:39:8d:89:79:b7:9e:f5:51:8c:1d:58:78:24:c6:9e:a0:42: cb:74:33:c7:bd:68:3c:ac:bc:75:69:44:f0:a2:a1:0f:d8:a8: b9:35:f8:17:58:da:69:8c:1f:95:cb:ff:15:c4:7c:e8:aa:33: 29:dd:c7:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUxMTA0MTQzODEwWhcNMjUxMTExMTQzODEwWjAYMRYwFAYD VQQDEw02OTBhMGZkMi03NjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu67FgWosG29a0UOcac2PUQjenP6PNlKVd7fcGEjpfSZ5jUgOkYgOArAAAAYr bZT/E00d0PCo7sxfWXVxt6pCmBeVcWtyrX+O1HKBCWWxOgJTiXaEW1Q+ukTFcMeu N4Sj5WbwME7bJcmxPnnDgdiFNavRo0Epibu5P980g1gBqEc+iz/BXkPba2g+LJ7t y8NUCZ/txZ4oy8LmpTXY9TbcV+PAiH5/kw68oLcV6VIR26hCWE29jL/MtvaAKF+L 9fr0SehlWjV1pmV8xfRYx5NemcQl8hbrjx+svqEJ300bR+p24toni1prUEioXQVu v19N6PKnuFw/UosnQWGmmZAx4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhL/fXk EalCAPfa4xgg4fByUsfoMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt5sBoX/ZGqKDvj6+ky1gE2iJjmu8M43SbCBe+rMEz/2K9XTQahMWA rdHgxN0HcM6P50/+h8tYyZRrkj2GM504HtG0UowXkn8wdcZ+ewBKFjonuAlqt1vW a9dHOBlELEEfEMQ3zTHWs61cjWg9MSME+zjFRMnP6mLPc7oAnR3NndLQ4JmpBpXR HA1ZICY4W8mLMEf2fsMdaeOn0+wXN/w473Xmat663wwHYXcFSL6ARcrjztt44zoe nu7mvfDOBO7VBqBTli+XOY2Jebee9VGMHVh4JMaeoELLdDPHvWg8rLx1aUTwoqEP 2Ki5NfgXWNppjB+Vy/8VxHzoqjMp3cd+ -----END CERTIFICATE-----Generated at Tue Nov 4 20:32:22 2025 by rpki-client